23 matches found
CLEANSTART-2026-PA10116 Security fix for GHSA-3f6p-5ww8-9rcr applied in: soketi 1.4.0-r0
Security vulnerability affects the soketi package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-MA00525 Knex Knex
Security vulnerability affects the soketi package. Knex Knex...
CLEANSTART-2026-VK76913 Axios is a promise-based HTTP client for the browser and Node
Security vulnerability affects the soketi package. Axios is a promise-based HTTP client for the browser and Node...
CLEANSTART-2026-RL17852 Axios is a promise based HTTP client for the browser and Node
Security vulnerability affects the soketi package. Axios is a promise based HTTP client for the browser and Node...
PT-2026-135840
Security vulnerability affects the soketi package. This issue is resolved in later releases. See references for vulnerability details...
CVE-2022-21667
soketi is an open-source WebSockets server. There is an unhandled case when reading POST requests which results in the server crashing if it could not read the body of a request. In the event that a POST request is sent to any endpoint of the server with an empty body, even unauthenticated with t...
GHSA-G6W6-H933-4RC5 Soketi was exposed to Sandbox Escape vulnerability via vm2
Impact What kind of vulnerability is it? Who is impacted? Anyone who might have used Soketi with the cluster driver or through PM2. Patches Has the problem been patched? What versions should users upgrade to? Get the latest version of Soketi. Workarounds Is there a way for users to fix or remedia...
Soketi was exposed to Sandbox Escape vulnerability via vm2
Impact What kind of vulnerability is it? Who is impacted? Anyone who might have used Soketi with the cluster driver or through PM2. Patches Has the problem been patched? What versions should users upgrade to? Get the latest version of Soketi. Workarounds Is there a way for users to fix or remedia...
PT-2023-33017
Name of the Vulnerable Software and Affected Versions Soketi affected versions not specified Description The issue impacts anyone who used Soketi with the cluster driver or through PM2. Recommendations Upgrade to the latest version of Soketi...
soketi denial of service vulnerability
soketi is a C application ported to Node.js. soketi suffers from a denial of service vulnerability that stems from not properly handling incoming error messages, which can be exploited by attackers to cause a denial of service in the application...
Denial Of Service (DoS)
@soketi/soketi is vulnerable to denial of service. The vulnerability that exists in the server function in server,ts file does not properly handle the endpoint value in dynamodb allowing an attacker to crash the application...
CVE-2022-21667
soketi is an open-source WebSockets server. There is an unhandled case when reading POST requests which results in the server crashing if it could not read the body of a request. In the event that a POST request is sent to any endpoint of the server with an empty body, even unauthenticated with t...
Design/Logic Flaw
soketi is an open-source WebSockets server. There is an unhandled case when reading POST requests which results in the server crashing if it could not read the body of a request. In the event that a POST request is sent to any endpoint of the server with an empty body, even unauthenticated with t...
Soketi security vulnerabilities
soketi is a C application ported to Node.js. soketi suffers from a denial of service vulnerability that stems from not properly handling incoming error messages, which can be exploited by attackers to cause a denial of service in the application...
Denial of Service in soketi
Impact What kind of vulnerability is it? Who is impacted? There was a wrong behavior when reading POST requests, making the server crash if it couldn't read the body. In case a POST request was sent to any endpoint of the server with an empty body, even unauthenticated with the Pusher Protocol, i...
GHSA-86CH-6W7V-V6XF Denial of Service in soketi
Impact What kind of vulnerability is it? Who is impacted? There was a wrong behavior when reading POST requests, making the server crash if it couldn't read the body. In case a POST request was sent to any endpoint of the server with an empty body, even unauthenticated with the Pusher Protocol, i...
CVE-2022-21667
The vulnerability CVE-2022-21667 affects soketi, an open‑source WebSockets server. An unhandled case when reading POST requests with an empty body can crash the server, even for unauthenticated clients using the Pusher Protocol. All users are affected; there are no workarounds and upgrading is re...
CVE-2022-21667
soketi is an open-source WebSockets server. There is an unhandled case when reading POST requests which results in the server crashing if it could not read the body of a request. In the event that a POST request is sent to any endpoint of the server with an empty body, even unauthenticated with t...
CVE-2022-21667 Denial of Service in soketi
soketi is an open-source WebSockets server. There is an unhandled case when reading POST requests which results in the server crashing if it could not read the body of a request. In the event that a POST request is sent to any endpoint of the server with an empty body, even unauthenticated with t...
CVE-2022-21667 Denial of Service in soketi
soketi is an open-source WebSockets server. There is an unhandled case when reading POST requests which results in the server crashing if it could not read the body of a request. In the event that a POST request is sent to any endpoint of the server with an empty body, even unauthenticated with t...